vulnerability

OS X update for quarantine (CVE-2023-42838)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

Feb 19, 2024

Added

Feb 19, 2024

Modified

Mar 27, 2026

Description

An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

Solutions

apple-osx-upgrade-12_7_2apple-osx-upgrade-13_6_3apple-osx-upgrade-14_1

References

CVE-2023-42838
https://attackerkb.com/topics/CVE-2023-42838
CWE-284
EUVD-EUVD-2023-47259
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-47259
https://support.apple.com/kb/HT213984
https://support.apple.com/kb/HT214037
https://support.apple.com/kb/HT214038

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report